CN116488926B - Information processing method, interconnection system, computer storage medium, and computer device - Google Patents

Abstract

The invention discloses an information processing method, an interconnection system, a computer readable storage medium and computer equipment, and provides a perfect scheme for carrying out data transmission between the equipment, which relates to one or more first type terminals and one or more second type terminals, wherein the first type terminals are connected with a server, the second type terminals are connected with the server through the second type terminals, the server authenticates the first type terminals and the second type terminals which are connected into the data interconnection system, certificates are issued to the first type terminals and the second type terminals after the authentication is passed, the server verifies the data uploaded by the first type terminals and the second type terminals, and subsequent data transmission is carried out after the verification is passed, so that the safety of the data transmission is improved on the premise of ensuring that a data transmission path is convenient and clear.

Description

Information processing methods, interconnection systems, computer storage media and computer equipment

Technical field

The invention belongs to the field of data information processing, and specifically relates to an information processing method and an interconnection system, with the help of which data transmission between terminal devices can be realized.

Background technique

With the rapid development of computer, network and multimedia technologies, there are more and more ways to transmit data between devices. For example, devices directly transmit data to each other, and devices use servers as media to transmit information. The types of information transmitted are becoming more and more abundant, from the initial numbers, to the subsequent text, to today's multimedia data such as pictures and videos, making the types of tasks that the device can perform flexible and changeable.

Nowadays, the functions of PCs, iPads, mobile phones and other terminals are becoming increasingly powerful. In addition to completing their basic functions such as data calculation, making and receiving calls, and gaming and entertainment, people have given these terminals more meanings of use, such as watching online artistic performances. , online education and learning activities, online meetings, etc., have greatly improved the convenience of people’s daily work and life.

However, if the access mechanism of the device is not set during device data transmission, there will be great security risks in data transmission between devices. The leakage of sensitive information may have serious consequences. This is an urgent problem that needs to be solved in the industry. .

Contents of the invention

Purpose of the invention: In view of the hidden danger of data leakage in the existing technology when devices transmit data to each other, the present invention proposes an information data method, an interconnection system, and a computer-readable storage medium. and computer equipment, providing corresponding solutions for the equipment access mechanism for data transmission and the security mechanism of data transmission, thereby improving the management of equipment and improving the security of data transmission.

Technical solution: The present invention adopts the following technical solution:

The invention provides an information processing method, which provides security guarantee for convenient transmission of data through a corresponding interconnection system. The interconnection system includes a server, a first type terminal, and a second type terminal. Each of the first type terminal and the second type terminal can be one or more; the first type terminal is connected to the server, and the second type terminal is connected to the server through the first type terminal. The type terminal establishes a connection with the server. The first type terminal uploads the first data to the server. After the server processes the first data according to the first rule, it transmits it to the corresponding at least one second type terminal. The second type terminal uploads the second data to the server. The data is uploaded to the server, and the server processes the second data according to the second rule and then transmits it to the corresponding first type terminal.

Preferably, when the first type terminal establishes a connection with the server, it sends the first application information to the server. After the server passes the authentication, it issues a primary certificate to the corresponding first type terminal. After the first type terminal successfully imports the primary certificate locally, , feedback success information to the server; the second type terminal sends the second application information for access to the interconnection system to the first type terminal in the same domain. After the first type terminal passes the authentication, it sends joint application information to the server, and the server passes the verification. Then issue the second-level certificate and the corresponding second-level authorization information to the corresponding first-type terminal. After the first-type terminal is associated and stored, the second-level certificate is sent to the corresponding second-type terminal. After the second-type terminal successfully imports the certificate locally, , feeding back success information to the server through the first type terminal.

Preferably, there is a mapping relationship between the secondary certificate and the primary certificate, and the first type terminal and/or the second type terminal join the domain through active application or passive invitation.

Preferably, the first type terminal and the second type terminal being located in the same domain means that the first type terminal and the second type terminal are located in at least one of the same geographical range, the same local area network, the same WIFI network, and the same VPN.

Preferably, the first type terminal uploads the first data to the server, and the server processes the first data according to the first rule and then transmits it to the corresponding at least one second type terminal, including: the first type terminal transmits the first data to the server. The data is encoded and uploaded to the server. The server decodes and verifies the data. After passing the verification, it determines whether the first data is associated with the current execution task of the first type terminal. If so, the encoded first data is transmitted to the corresponding second Type terminal.

Preferably, the second type terminal uploads the second data to the server, and the server processes the second data according to the second rule and then transmits it to the corresponding first type terminal, including: if the second data is for the first feedback data of the data, then add the corresponding time and/or location information of the first data to the second data,

The second type terminal encodes the second data and uploads it to the server. The server decodes and verifies the data. After passing the verification, it determines whether the second data is associated with the current execution task of the second type. If so, the encoded second data is uploaded to the server. The data is transmitted to the corresponding first type terminal.

The invention provides an interconnection system, which includes: a server, at least one first-type terminal, and at least one second-type terminal; the first-type terminal is used to establish a connection with the server and upload first data to the server; The second type terminal is used to establish a connection with the server through the first type terminal and upload the second data to the server; the server is used to process the first data according to the first rule and transmit it to the corresponding at least one second The type terminal processes the second data according to the second rule and then transmits it to the corresponding first type terminal.

Preferably, the first type terminal encodes the first data and uploads it to the server. The server performs decoding and data verification. After passing the verification, it determines whether the first data is associated with the current execution task of the first type terminal. If so, the encoded data is The first data is transmitted to the corresponding second type terminal.

The present invention also provides a computer-readable storage medium on which program instructions are stored. When the program instructions are executed by a computer, the steps of any one of the above information processing methods are implemented.

The invention also provides a computer device. The device includes a processor and a memory. The processor and the memory communicate through a bus. Program instructions are stored on the memory. When the program instructions are executed by the processor, any of the above mentioned items can be realized. steps of information processing methods.

Beneficial effects: The present invention provides a complete data transmission solution between devices, involving one or more first-type terminals, and one or more second-type terminals. The first-type terminals are connected to the server, and the second-type terminals are connected to the server. The terminal is connected to the server through the second type terminal. The server authenticates the first type terminal and the second type terminal connected to the interconnection system. After passing the authentication, it issues certificates to the first type terminal and the second type terminal. The server authenticates the first type terminal and the second type terminal. The data uploaded by the first type terminal and the second type terminal are verified, and subsequent data transmission is carried out after the verification is passed. This improves the security of data transmission on the premise of ensuring that the data transmission path is convenient and smooth.

Description of drawings

Figure 1 is a flow chart of the method according to the embodiment of the present invention;

Figure 2 is a schematic diagram of the interconnection system.

Detailed ways

The flowcharts and block diagrams in the present drawings illustrate the architecture, functionality, and operations of possible implementations of methods and systems according to various embodiments of the present disclosure. It should be noted that each block in the flowchart or block diagram may represent a module, program segment, or part of code, and the module, program segment, or part of code may include one or more components for implementing the various embodiments. Executable instructions for the specified logical function. It should also be noted that, in some alternative implementations, the functions noted in the block may occur out of the order noted in the figures. For example, two blocks shown one after the other may actually execute substantially in parallel, or they may sometimes execute in the reverse order, depending on the functionality involved. It should also be noted that each block of the flowchart illustrations and/or block diagrams, and combinations of blocks in the flowchart illustrations and/or block diagrams, can be implemented using special purpose hardware-based systems that perform the specified functions or operations. , or can be implemented using a combination of specialized hardware and computer instructions.

The terms "includes," "includes," and similar terms used herein should be understood as open-ended terms, that is, "includes/includes but is not limited to," indicating that other content may also be included. In this disclosure, the term "based on" means "based at least in part on"; the term "one embodiment" means "at least one embodiment"; and the term "another embodiment" means "at least one additional embodiment".

In the technical solution proposed by the present invention, the terminal involved can be any one or more of PC, iPad, smart phone, special equipment and other devices. The connection between the devices can be a direct wired connection or a wireless connection. The server , the first type terminal and the second type terminal may be located in the same geographical location or in different places, which is not limited by the present invention.

The present invention provides an information processing method. Figure 1 is a schematic implementation of the information processing method. This method provides security guarantee for convenient transmission of data through a corresponding interconnection system. The interconnection system includes a server, a first type terminal, and a second type terminal. Each of the first type terminal and the second type terminal can be one or more; the first type terminal is connected to the server, and the second type terminal is connected to the server through the first type terminal. The type terminal establishes a connection with the server. The first type terminal uploads the first data to the server. After the server processes the first data according to the first rule, it transmits it to the corresponding at least one second type terminal. The second type terminal uploads the second data to the server. The data is uploaded to the server, and the server processes the second data according to the second rule and then transmits it to the corresponding first type terminal.

This information processing method can be applied to online meetings, online learning and education, online artistic performances, etc. The server is mainly used to provide data authentication, storage and transmission. The first type of terminal may be a terminal with certain management rights. For example, the users of the first type of terminal are conference organizer managers, online learning classroom managers, etc. The second type of terminal is generally a terminal used by ordinary participants. Of course, the first type terminal can apply to the server so that the second type terminal has the opportunity to be converted into the first type terminal.

Preferably, when the first type terminal establishes a connection with the server, it sends the first application information to the server. After the server passes the authentication, it issues a primary certificate to the corresponding first type terminal. After the first type terminal successfully imports the primary certificate locally, , feedback success information to the server.

In one implementation, the first application information may be the positioning information, domain information, network address, MAC address of the first type terminal, the user's dynamic image, the user's biological information (such as fingerprint/iris, etc.), and others. One or more types of recommendation information for at least one first type terminal; the server stores and authenticates the first application information. If there is recommendation information for other first type terminals, it will also provide the corresponding first type terminal with recommendation information. Confirm the information; when the authentication is passed, a primary certificate is issued to the first type terminal that issued the application information. This certificate can also be called a root certificate, which includes the first application information and the new one added by the server for subsequent data verification. Information, certificate identification information, etc., the first type terminal imports and installs it locally after receiving the certificate.

Preferably, the second type terminal sends the second application information for accessing the system to the first type terminal in the same domain. After the first type terminal passes the authentication, it sends the joint application information to the server. After the server passes the verification, it sends the joint application information to the corresponding first type terminal. The type terminal issues the second-level certificate and the corresponding second-level authorization information. After the first-type terminal associates and stores it, it sends the second-level certificate to the corresponding second-type terminal. After the second-type terminal successfully imports the certificate locally, it passes the first-type terminal Feedback success information to the server.

In one implementation, the second application information may be the positioning information, domain information, network address, MAC address of the second type terminal, the user's dynamic image, the user's biological information (such as fingerprint/iris, etc.), and others. One or more types of recommendation information for at least one first/second type terminal;

The first type terminal in the same domain stores and authenticates the second application information. If there is recommendation information for other first/second type terminals, it will also confirm the information with the corresponding first/second type terminal; when After the authentication is passed, the first type terminal combines its authenticated first application information and the corresponding second application information to obtain the joint application information, and sends it to the server; the server verifies the received joint application information; the server After passing the verification, the second-level certificate and the corresponding second-level authorization information are issued to the corresponding first-type terminal. The second-level certificate includes the second application information, information newly added by the server for subsequent data verification, certificate identification information, etc. ; There is a mapping relationship between the secondary certificate and the primary certificate, for example, the data verification rules are the same, the first N digits of the certificate identification information are the same, etc.; after the first type terminal is associated and stored, the secondary certificate is sent to the corresponding second type terminal, and the second After the type terminal successfully imports the certificate locally, it feeds back success information to the server through the first type terminal.

Preferably, the first type terminal and the second type terminal are located in the same domain means that the first type terminal and the second type terminal are located in at least one of the same geographical range, the same local area network, the same WIFI network, and the same VPN, for example, through GPS The positioning device realizes the acquisition of terminal location information. The first type terminal and the second type terminal can be located in the same subnet, log in to the same VPN network platform, and connected to the same WIFI wireless network; the first type terminal and/or the second type terminal can Type terminals can join the corresponding domain through active application or by receiving invitations sent by the server and/or other terminals. The first type terminal and the second type terminal equipment located in the same domain can jointly organize an online conference, online teaching activities, etc.

Preferably, the first type terminal uploads the first data to the server, and the server processes the first data according to the first rule and then transmits it to the corresponding at least one second type terminal, including: the first type terminal transmits the first data to the server. The data is encoded and uploaded to the server. The server decodes and verifies the data. After passing the verification, it determines whether the first data is associated with the current execution task of the first type terminal. If so, the encoded first data is transmitted to the corresponding second Type terminal.

In one implementation, the encoding method can be predetermined between the terminal and the server. During the data transmission process, the sending end can encrypt the data, and the receiving end can decrypt the data. The encryption and decryption methods can be stored in advance. in the corresponding certificate. When sending data files, it is also judged whether the data is related to the task currently performed by the terminal to prevent incorrect transmission of irrelevant or illegal data information (such as data information that does not meet regulations), such as when conducting online meetings, online meetings, etc. In scenarios such as learning, the audio and image information played when the terminal performs the current task can be analyzed to determine whether the transmitted data files, texts, etc. are related to the current topic.

Optionally, when verifying that illegal data information exists in the transmitted first data or second data, the server no longer transmits the data information, or extracts summary information from the transmitted information, or hides the illegal information present therein. Notify the recipient, for example, when the first type terminal transmits illegal data information, the illegal information is hidden, and when there is valid information in the remaining part, the corresponding second type terminal is notified, and vice versa; the illegal information sent by the terminal can also be The number of times is counted. When the set number of times is reached, its permission to send data information is revoked, and it can also be prohibited from participating in other task scenarios again. Optionally, the server sets a data revision interface so that the terminal that sent the illegal data information sends relevant detailed information again for reference by the server to determine whether there is actual illegal behavior.

Preferably, the second type terminal uploads the second data to the server, and the server processes the second data according to the second rule and then transmits it to the corresponding first type terminal, including: if the second data is for the first For the feedback data of the data, the time and/or location information of the corresponding first data is added to the second data. The second type terminal encodes the second data and uploads it to the server. The server decodes and verifies the data, and the verification passes. Then it is determined whether the second data is associated with the currently executed task of the second type, and if so, the encoded second data is transmitted to the corresponding first type terminal.

In one implementation, the feedback data is response data to the first data, data with questions, such as question responses, questions/corrections of played files, etc. In order to facilitate users of the first type terminal to discover problems in a timely manner and organize the data, The feedback data indicates the specific location of the first data (such as page number/page coordinate/number, etc.), time information, etc.

In one implementation, every time the first terminal or the second terminal device needs to join a task scenario involved in a certain domain (such as joining a meeting, joining a learning class, etc.), identity authentication verification is required, or the interval exceeds a predetermined time. Verification is only required when the time comes, and you can also set additional account numbers and passwords required for verification for each task scenario. Users of the first type of terminal device can pre-set the number of participating terminals when organizing scene task activities. When the first type of terminal device or the server determines that the number of participating terminals has reached the set number, other devices will no longer be allowed to join.

The server can also record information such as the domain that each terminal device joins, the time, location, and frequency of performing scene tasks. Pay special attention to information related to the second type of terminal equipment, and conduct more stringent security authentication for second type terminals that frequently join/exit the same domain or different domains in the short term and frequently participate in tasks in different scenarios. For example, in addition to having to pass the corresponding After the first-type terminals and servers have been verified, a preset number of second-type terminal equipment will be selected randomly or according to preset rules from the same domain to participate in auxiliary verification to exclude terminal equipment that obviously does not meet the conditions; until all have passed It is then submitted to the first type of terminal device and/or server for verification, and the joining is executed only after all have passed. For example, you can give priority to participating in scenario tasks multiple times, and there is no terminal sending illegal data information. This verification rule also applies to the authentication of users who change terminal devices.

The server can also store the interactive data of all terminals to facilitate subsequent data query and traceability; specifically, when storing the certificate, the server randomly selects the identification information of more than half of the terminals from the corresponding domain where the task is executed, and matches it with the identification information of more than half of the terminals. After the data itself is spliced according to the set data intersection rules, the hash information of the spliced data is obtained and saved to prevent individual terminals from illegally tampering with the stored evidence data.

The present invention also provides an interconnection system. Figure 2 is a schematic diagram of the system. Specifically, the system includes: a server, at least one first type terminal, and at least one second type terminal; the first type terminal is used to communicate with The server establishes a connection and uploads the first data to the server; the second type terminal is used to establish a connection with the server through the first type terminal and uploads the second data to the server; the server is used to process the first data according to the first rule. After the data is processed, it is transmitted to at least one corresponding second type terminal. After the second data is processed according to the second rule, it is transmitted to the corresponding first type terminal.

Preferably, the first type terminal encodes the first data and uploads it to the server. The server performs decoding and data verification. After passing the verification, it determines whether the first data is associated with the current execution task of the first type terminal. If so, the encoded data is The first data is transmitted to the corresponding second type terminal.

The present invention also provides a computer-readable storage medium on which program instructions are stored. When the program instructions are executed by a computer, the steps of any one of the above information processing methods are implemented.

The invention also provides a computer device. The device includes a processor and a memory. The processor and the memory communicate through a bus. Program instructions are stored on the memory. When the program instructions are executed by the processor, any of the above mentioned items can be realized. steps of information processing methods.

The above descriptions are only preferred embodiments of the present invention and do not limit the present invention in any form. Although the present invention has been disclosed above in terms of preferred embodiments, this is not intended to limit the present invention. Any person familiar with the art can make many possible changes and modifications to the technical solution of the present invention using the methods and technical content disclosed above without departing from the scope of the technical solution of the present invention, or modify it into equivalent changes. Example. Therefore, any simple modifications, equivalent changes, and modifications made to the above embodiments based on the technical essence of the present invention without departing from the content of the technical solution of the present invention still fall within the protection scope of the technical solution of the present invention.

Claims (9)

1. An information processing method, characterized in that it is applied to an interconnection system. The interconnection system includes a server, at least one first type terminal, and at least one second type terminal. The first type terminal is connected to the server, and the second type terminal is connected to the server. The type terminal establishes a connection with the server through the first type terminal. The first type terminal uploads the first data to the server. After the server processes the first data according to the first rule, it transmits it to the corresponding at least one second type terminal. The type terminal uploads the second data to the server, and the server processes the second data according to the second rule and then transmits it to the corresponding first type terminal; When the first type terminal establishes a connection with the server, it sends first application information to the server. The first application information includes the first type terminal's positioning information, domain information, network address, MAC address, user's dynamic image, and user's biometrics. information, and one or more of the recommended information of at least one other first-type terminal. After the server passes the authentication, it will issue a primary certificate to the corresponding first-type terminal. After the first-type terminal successfully imports the primary certificate locally, Feedback success information to the server; the second type terminal sends the second application information for access to the interconnection system to the first type terminal in the same domain. After the first type terminal passes the authentication, it sends joint application information to the server. After the server passes the verification Issue the second-level certificate and the corresponding second-level authorization information to the corresponding first-type terminal. After the first-type terminal is associated and stored, the second-level certificate is sent to the corresponding second-type terminal. After the second-type terminal successfully imports the certificate locally, Feed back success information to the server through the first type terminal. 2. The method according to claim 1, characterized in that there is a mapping relationship between the secondary certificate and the primary certificate, and the first type terminal and/or the second type terminal join the domain through active application or passive invitation. 3. The method according to claim 1, wherein the first type terminal and the second type terminal are located in the same domain means that the first type terminal and the second type terminal are located in the same geographical range, the same local area network, the same WIFI network, At least one from the same VPN. 4. The method according to claim 1, characterized in that the first type terminal uploads the first data to the server, and the server processes the first data according to the first rule and then transmits it to the corresponding at least one second data. Type terminals include: the first type terminal encodes the first data and uploads it to the server. The server decodes and verifies the data. After passing the verification, it determines whether the first data is associated with the current execution task of the first type terminal. If so, then The encoded first data is transmitted to the corresponding second type terminal. 5. The method according to claim 4, characterized in that the second type terminal uploads the second data to the server, and the server processes the second data according to the second rule and then transmits it to the corresponding first type terminal. The terminal includes: if the second data is feedback data for the first data, adding the time and/or location information of the corresponding first data to the second data, The second type terminal encodes the second data and uploads it to the server. The server decodes and verifies the data. After passing the verification, it determines whether the second data is associated with the current execution task of the second type. If so, the encoded second data is uploaded to the server. The data is transmitted to the corresponding first type terminal. 6. An interconnection system, characterized in that it includes: a server, at least one first type terminal, and at least one second type terminal; The first type of terminal is used to establish a connection with the server and upload the first data to the server; The second type terminal is used to establish a connection with the server through the first type terminal and upload the second data to the server; The server is configured to process the first data according to the first rule and then transmit it to the corresponding at least one second type terminal, and to process the second data according to the second rule and then transmit it to the corresponding first type terminal; When the first type terminal establishes a connection with the server, it sends first application information to the server. The first application information includes the first type terminal's positioning information, domain information, network address, MAC address, user's dynamic image, and user's biometrics. information, and one or more of the recommended information of at least one other first-type terminal. After the server passes the authentication, it will issue a primary certificate to the corresponding first-type terminal. After the first-type terminal successfully imports the primary certificate locally, Feedback success information to the server; the second type terminal sends the second application information for access to the interconnection system to the first type terminal in the same domain. After the first type terminal passes the authentication, it sends joint application information to the server. After the server passes the verification Issue the second-level certificate and the corresponding second-level authorization information to the corresponding first-type terminal. After the first-type terminal is associated and stored, the second-level certificate is sent to the corresponding second-type terminal. After the second-type terminal successfully imports the certificate locally, Feed back success information to the server through the first type terminal. 7. The system according to claim 6, characterized in that the first type terminal encodes the first data and uploads it to the server, the server performs decoding and data verification, and after passing the verification, determines the difference between the first data and the first type terminal. Whether the currently executed task is associated, if so, transmit the encoded first data to the corresponding second type terminal. 8. A computer-readable storage medium, characterized in that program instructions are stored thereon, and when the program instructions are executed by a computer, the steps of the method according to any one of claims 1-5 are implemented. 9. A computer device, characterized in that the device includes a processor and a memory, the processor and the memory communicate through a bus, and program instructions are stored on the memory. When the program instructions are executed by the processor, the implementation of claim 1- Steps of the method described in any one of 5.